Search Vulnerabilities

SQL injection in syslog-ng SQL destionation driver

OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname → stored XSS in the LuCI admin UI

App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames in several output modes

Net::Statsite::Client versions through 1.1.0 for Perl allow metric injections

Kitty vulnerable to command injection via unsanitized OSC 21 query reply

Metrics::Any::Adapter::SignalFx versions before 0.04 for Perl does not protect against metric injections

Metrics::Any::Adapter::DogStatsd versions before 0.04 for Perl does not protect against metric injections

Metrics::Any::Adapter::Statsd versions before 0.04 for Perl does not protect against metric injections

DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags

DataDog::DogStatsd versions through 0.07 for Perl allow metric injections

Etsy::StatsD versions through 1.002002 for Perl allow metric injections

Net::Statsd versions before 0.13 for Perl allow metric injections

Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections

Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections

Claude HUD 0.0.12 Terminal Injection via OSC 8 Hyperlinks

Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections

Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections

Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections

Tabby: Dragging and Dropping a File into Tabby Can Lead to Code Execution

gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injection